60 matches found
EUVD-2026-24575
free5GC PCF: Memory Leak via CORS Middleware Registration in HTTP Handler Leads to Denial of Service...
CVE-2026-41135
free5GC UDR is the Policy Control Function PCF for free5GC, an an open-source project for 5th generation 5G mobile core networks. A memory leak vulnerability in versions prior to 1.4.3 allows any unauthenticated attacker with network access to the PCF SBI interface to cause uncontrolled memory...
CVE-2026-41135
CVE-2026-41135 affects free5GC UDR (PCF) prior to version 1.4.3. The root cause is a faulty router.Use() call inside an HTTP handler that registers a new CORS middleware on every incoming request, causing the Gin router to permanently grow its handler chain. This leads to progressive memory exhau...
PT-2026-34224
Name of the Vulnerable Software and Affected Versions free5GC UDR versions prior to 1.4.3 Description A memory leak in the Policy Control Function PCF allows an unauthenticated attacker with network access to the PCF SBI interface to cause uncontrolled memory growth. By sending repeated HTTP...
Denial Of Service (DoS)
github.com/free5gc/pcf is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of crafted POST requests to the NpcfBDTPolicyControl API, which allows an attacker to trigger service disruption...
CVE-2025-66720
Null pointer dereference in free5gc pcf 1.4.0 in file internal/sbi/processor/ampolicy.go in function HandleDeletePoliciesPolAssoId...
PT-2026-4470
Name of the Vulnerable Software and Affected Versions free5gc pcf version 1.4.0 Description A null pointer dereference exists in free5gc pcf version 1.4.0. This issue is located in the file internal/sbi/processor/ampolicy.go within the HandleDeletePoliciesPolAssoId function. Recommendations At th...
EUVD-2018-0940
Malware in sbrugna...
CVE-2023-46553
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formParentControl...
CVE-2023-34566
Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter time at /goform/saveParentControlInfo...
PT-2025-27744
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A buffer size issue in the Linux kernel's wifi component, specifically in the rtw88 module, has been resolved. The issue involved reading out of bounds due to an incorrect buffer size...
CVE-2025-29101
Tenda AC8V4.0 V16.03.34.06 was discovered to contain a stack overflow via the deviceid parameter in the getparentControllistInfo function...
CVE-2025-29101
The CVE-2025-29101 entry concerns Tenda AC8V4.0 with firmware version V16.03.34.06, where a stack overflow is triggered by the deviceid parameter in the get_parentControl_list_Info function. The vulnerability is documented as a stack overflow that can impact availability, and CNVD references pote...
DEBIAN-CVE-2024-53203
In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential array underflow in ucsiccgsynccontrol The "command" variable can be controlled by the user via debugfs. The worry is that if conindex is zero then "&uc-ucsi-connectorconindex - 1" would be an array...
PT-2024-21268 · Google · Android
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: In the tmu tz control function of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of...
Qualcomm Chipsets Security Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets, which arises from a core memory corruption while processing control functions...
SUSE CVE-2020-0466
In doepollctl and eploopcheckproc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...
The vulnerability of the function in bl_categires_help.php, a parental control function for Internet CTparental, allows a intruder to inject any code they desire.
The vulnerability of the CTparental parental control function in blcategireshelp.php exists due to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability could allow a hacker to inject arbitrary code...
Arbitrary Code Execution
vlc is vulnerable to arbitrary code execution. A use-after-free in the Control function in demux/mkv/mkv.cpp allows an attacker to execute arbitrary code on the host OS...